CVE-2023-48782

CVSS 3.1: 8.8 high
EPSS: 3%p85
Published: Dec 13, 2023 · Dec 13, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-48782 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters

Vendors: fortinet

Products: fortiwlm

Weakness: CWE-78

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news

2 stories

Fortinet Warns of Critical FortiWLM Flaw That Could Lead to Admin Access Exploits

The Hacker NewsDec 23, 05:21 UTC · Dec 23, 2024VulnerabilityCVE-2023-34990 CVE-2023-48782 CVE-2024-488892 · 1 read

Fortinet warns about Critical flaw in Wireless LAN Manager FortiWLM

Security AffairsDec 19, 13:53 UTC · Dec 19, 2024VulnerabilityCVE-2023-34990 CVE-2023-487823